Hi,
On Wed, Aug 03, 2016 at 05:06:22PM +0000, Smith, Donald wrote:
> Note everywhere this says BHF I assumed DBHF not Source based BHFing. I
> suspect SBHF is out of scope for this effort. I could be wrong.
source-based blackholing in remote networks is something I do not consider
viable - what customer A might consider an attacker might be an important
source of information to customer B, so you can permit customer A to
drop packets *to A*, but not "from X, no matter if destined to A or B"
(in some case the network provider might decide "I drop all traffic from
X, because it's causing problems to my infrastructure", but even then,
his upstreams will not permit to do this transitively)
I do not think the draft needs to be extended to say so - we only
define a code point, not define a new mechanism for blackholing.
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
_______________________________________________
GROW mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/grow
